Vulnerability CVE-2022-27382: Information

Description

MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Published: April 12, 2022
Modified: July 19, 2022
Error type identifier: CWE-617

Fixed packages

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://jira.mariadb.org/browse/MDEV-26402
  • Exploit
  • Issue Tracking
  • Vendor Advisory
https://security.netapp.com/advisory/ntap-20220526-0004/
  • Third Party Advisory
    1. Configuration 1

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.7.0
      End excliding
      10.7.4

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.4.0
      End excliding
      10.4.25

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.5.0
      End excliding
      10.5.16

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.6.0
      End excliding
      10.6.8